64e5384b26a5a2379e2554d98f1b0e7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64e5384b26a5a2379e2554d98f1b0e7e_JaffaCakes118
Size

104KB
MD5

64e5384b26a5a2379e2554d98f1b0e7e
SHA1

aecdbd4b823532bb0ff244e5f5ab89cd35426702
SHA256

3bef56adffa7faba9af4d5da9dbc773b954b25d5a1cd8cf67bc739bc6a486f83
SHA512

400e47de1eba8a5bad83fc950088c02324a2cf5eec766fb5006418bf1dc1818c84f7afba9a8d5001ca6e52042f289f1caad197e7737cd3144eee4c7920869bcc
SSDEEP

768:zlal4nLQCVhXRTm/a8qFDoT4VGb/mxzZZ7CTdS3/xcWqRwLq1FwBBSoLR4U2OFOt:haH/adF7xpmEgkF0TS3Bs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64e5384b26a5a2379e2554d98f1b0e7e_JaffaCakes118

Files

64e5384b26a5a2379e2554d98f1b0e7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

711a3938e56dcb79f435be8a1d3e8ab5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW

msvbvm60

MethCallEngine
ord516
ord665
ord631
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord100
ord616
ord581

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ